$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft File: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json) Hash identifier: gXoFM1pzNkkmJ1gFfUruZvifMgp8hvokpnVEyuWHzuQ= Subject key identifier: 2F:98:10:84:79:1A:FD:2D:35:A7:89:E6:B7:D7:AF:1A:94:FD:7B:52 Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 Certificate issuer: /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft Manifest number: 0298 Signing time: Tue 01 Jul 2025 02:15:48 +0000 Manifest this update: Tue 01 Jul 2025 02:15:47 +0000 Manifest next update: Tue 08 Jul 2025 02:15:47 +0000 Files and hashes: 1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: dC22icHGBy9rze5lXcFi/pldwraZoqC/s5CDvrOTavE=) 2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: pHEalHPaBn8YLpxptX62/OxGR+yXDeFh5rO3/NYIRLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B60, serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824 Validity Not Before: Jul 1 02:15:47 2025 GMT Not After : Jul 8 02:15:47 2025 GMT Subject: CN=686344d3-0917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:1a:cc:67:31:5a:0f:8f:4e:28:4e:9f:23: 24:63:6c:e8:af:30:d9:5f:1a:1e:13:d7:79:8b:bf: d1:fd:8b:91:98:5e:cf:8c:be:f1:aa:57:15:35:ba: 3e:60:80:43:14:9c:a1:c7:02:ec:19:f7:42:fe:11: de:1a:e3:f3:d0:ae:4e:6f:01:00:de:20:25:46:70: 70:6b:e0:7d:c8:18:c9:63:17:e2:2c:20:5f:ae:55: 43:4b:94:10:71:63:97:da:85:cb:c6:a9:8a:30:90: e6:0f:4a:1f:4a:af:f4:49:2c:72:69:9d:34:d8:0e: fa:79:ee:98:0a:8a:1d:e2:f6:0e:08:44:8a:65:5e: c6:4b:e4:84:1d:4a:b0:0f:db:13:17:81:1c:0d:3b: 36:33:5b:07:fa:bb:be:c5:a0:bb:ad:56:a5:7c:46: ce:6e:2f:59:09:5e:34:e3:6b:87:27:47:69:ec:98: f4:e7:0b:a4:56:28:fe:09:59:34:52:03:20:b3:f1: 52:77:51:a6:de:77:da:2b:0b:04:30:00:ab:05:b5: 00:34:e0:f3:d9:ee:4c:20:ab:c5:a9:5a:cb:76:e0: ff:4b:22:8f:9c:ad:61:85:72:0f:27:b3:1c:01:34: 6c:05:7e:05:38:3a:fe:62:46:6a:9d:58:fd:76:01: fb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:98:10:84:79:1A:FD:2D:35:A7:89:E6:B7:D7:AF:1A:94:FD:7B:52 X509v3 Authority Key Identifier: keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:5d:dc:dd:97:d4:cd:fe:6c:8e:9c:a4:a6:21:f2:15:a8:03: 2a:dc:50:6a:c1:e0:09:26:11:bb:f1:cd:ff:06:49:22:5b:18: d8:11:7d:02:08:33:c9:17:47:17:81:8c:e9:f2:cd:d2:66:9f: b4:87:2a:c6:a9:ce:5c:97:50:86:be:10:0a:49:92:7a:99:16: 28:53:c1:77:94:a1:bd:c5:97:90:c7:fc:25:2d:af:29:da:fb: 10:0b:f0:b1:dd:45:79:2d:d5:17:90:42:6e:6f:e0:67:17:66: b2:a0:a7:fc:ac:d7:0c:09:0f:86:d0:a3:11:8a:e5:80:81:80: 5d:b9:de:a8:59:b8:d1:32:6a:65:01:d1:df:af:8c:ee:d0:ef: e3:92:c2:0d:ef:cb:a6:65:15:1f:a7:a4:d7:e4:a5:8c:b6:25: 67:41:31:15:46:cc:bf:b3:98:b9:97:6f:d9:69:db:1f:1d:7c: 01:b4:d4:80:18:2a:ad:86:95:ce:06:8f:3e:d6:2e:e6:0c:e6: 92:03:66:23:ff:45:25:d7:e6:03:65:52:69:10:b1:48:7d:80: 9e:94:8b:13:4f:ec:71:e1:9e:0b:24:4b:2f:4e:f8:6e:69:4b: 70:15:79:7b:51:51:e4:da:f4:18:f4:9f:65:71:65:09:28:2d: 11:19:38:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCNjAxMTAvBgNVBAUTKDEzRTE4OTlDMjNGRUIwN0ZFMTMxNjJFQjEwM0NDM0Mw MzhENzA4MjQwHhcNMjUwNzAxMDIxNTQ3WhcNMjUwNzA4MDIxNTQ3WjAYMRYwFAYD VQQDEw02ODYzNDRkMy0wOTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTcazGcxWg+PTihOnyMkY2zorzDZXxoeE9d5i7/R/YuRmF7PjL7xqlcVNbo+ YIBDFJyhxwLsGfdC/hHeGuPz0K5ObwEA3iAlRnBwa+B9yBjJYxfiLCBfrlVDS5QQ cWOX2oXLxqmKMJDmD0ofSq/0SSxyaZ002A76ee6YCood4vYOCESKZV7GS+SEHUqw D9sTF4EcDTs2M1sH+ru+xaC7rValfEbObi9ZCV4042uHJ0dp7Jj05wukVij+CVk0 UgMgs/FSd1Gm3nfaKwsEMACrBbUANODz2e5MIKvFqVrLduD/SyKPnK1hhXIPJ7Mc ATRsBX4FODr+YkZqnVj9dgH7QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+YEIR5 Gv0tNaeJ5rfXrxqU/XtSMB8GA1UdIwQYMBaAFBPhiZwj/rB/4TFi6xA8w8A41wgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI2MC9CMzJGM0U3MjA4 RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNIX2hNV0xyRUR6RHdEalhD Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UtR0puQ1Atc0hfaE1XTHJFRHpEd0RqWENDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI2MC9CMzJGM0U3MjA4RTMxMUVEODM2NDBDMjFDNEY5QUUwMi9FLUdKbkNQLXNI X2hNV0xyRUR6RHdEalhDQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Xdzdl9TN/myOnKSmIfIVqAMq3FBqweAJJhG78c3/BkkiWxjYEX0C CDPJF0cXgYzp8s3SZp+0hyrGqc5cl1CGvhAKSZJ6mRYoU8F3lKG9xZeQx/wlLa8p 2vsQC/Cx3UV5LdUXkEJub+BnF2ayoKf8rNcMCQ+G0KMRiuWAgYBdud6oWbjRMmpl AdHfr4zu0O/jksIN78umZRUfp6TX5KWMtiVnQTEVRsy/s5i5l2/ZadsfHXwBtNSA GCqthpXOBo8+1i7mDOaSA2Yj/0Ul1+YDZVJpELFIfYCelIsTT+xx4Z4LJEsvTvhu aUtwFXl7UVHk2vQY9J9lcWUJKC0RGTh7 -----END CERTIFICATE-----Generated at Wed Jul 2 19:35:51 2025 by rpki-client